Privacy Policy

Last updated: 23 September 2026

This Privacy Policy explains how Core Trade Hub Ltd uses personal information when you browse our website, contact us, open a trade account, subscribe to our newsletter or place an order. It also explains your choices and data protection rights.

1. Who is responsible for your information?

Core Trade Hub Ltd is the controller responsible for personal information used to operate this shop and manage our customer relationships.

Please use these details for privacy questions or requests about your personal information.

2. Information we collect

  • Contact and account details: your name, email address, telephone number, account credentials and any business details you provide.
  • Order and delivery information: billing and delivery addresses, items ordered, order history, delivery or collection instructions, invoices and payment status or transaction references.
  • Enquiries and correspondence: messages, quotation requests, documents or photographs you choose to send, and records of our replies.
  • Preferences: newsletter subscription choices and other preferences you provide.
  • Technical information: your IP address, browser and device information, pages requested, session identifiers and security or error logs produced when the website is used.

Most information comes directly from you. We may also receive payment confirmations from payment providers, delivery updates from carriers, or your business contact details from a colleague arranging an order on your behalf. Please only provide information about other people when you are entitled to do so, and make this notice available to them.

Required form fields identify information needed to handle your request. Without the necessary contact, billing or delivery details, we may be unable to open an account, provide a quotation or fulfil an order.

3. Why we use information and our lawful bases

  • Quotes, accounts and orders: to take steps you request before a contract and perform our contract with you. When you act for a company, we also rely on our legitimate interest in communicating with its representatives and supplying that company.
  • Delivery, collection, payments and customer support: to fulfil orders, arrange supply, answer questions and deal with returns or warranty enquiries. The basis is performance of a contract, or our legitimate interest in managing business customer relationships where you act for another organisation.
  • Accounting and legal requirements: to maintain records, meet tax and accounting duties and respond to lawful requests. The basis is compliance with legal obligations.
  • Security and business administration: to operate and troubleshoot the shop, protect accounts, prevent misuse or fraud, recover debts and establish or defend legal claims. We rely on our legitimate interests in running and protecting our business, taking account of your rights.
  • Newsletter subscriptions: to send updates you choose to receive, based on your consent. Subscribing is optional and is separate from placing an order.

When we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before you withdrew it.

4. Newsletters and your right to object

You can unsubscribe using the link in a marketing email or by contacting us. Essential messages about an order, payment, delivery or account are separate from marketing preferences.

You have the right to object at any time to use of your personal information for direct marketing. You can also object to processing based on legitimate interests for reasons relating to your situation.

5. Who receives information?

We share the information needed for the relevant service with:

  • website hosting, shop software, maintenance, security, backup and email service providers;
  • banks and payment providers handling your chosen payment method, including Stripe where its payment service is offered;
  • delivery providers, and suppliers where necessary to fulfil an order or investigate a product issue;
  • accountants, professional advisers and debt recovery or legal service providers where needed;
  • public authorities where disclosure is required by law.

Service providers processing information on our behalf must act under appropriate data protection terms. Providers such as banks and payment services may also be controllers for their own legal, security and regulatory purposes. Where you use Stripe, please also read Stripe's Privacy Policy.

6. Processing outside the United Kingdom

Hosting, payment and other technology providers may process information in countries outside the United Kingdom. Where a transfer is subject to UK data protection restrictions, it must be covered by an applicable UK adequacy regulation, appropriate contractual safeguards or another lawful transfer mechanism. You can contact us for details of the providers, relevant processing locations and safeguards applicable to your information, and how to obtain a copy of those safeguards.

7. How long we keep information

Retention depends on the purpose and type of record:

  • Orders, invoices and payment records: for the applicable tax and accounting record-keeping requirements and for any period needed to deal with related disputes or legal claims.
  • Account details: while needed to provide the account and manage the customer relationship. Closing an account does not necessarily remove order records that must be retained separately.
  • Enquiries and quotations: for the time needed to respond, handle reasonable follow-up and address any resulting order or dispute.
  • Marketing preferences: while the subscription remains active; a limited record of an opt-out may be retained so that we can respect it.
  • Technical logs and backups: for the periods needed for security, fault investigation and recovery, with deletion through the relevant log and backup cycles.

We assess retention by reference to ongoing business needs, legal duties, applicable claim periods and the need to resolve outstanding issues. Information should be deleted or anonymised when it is no longer needed for these purposes. Contact us if you need the retention information applicable to a particular record.

8. Cookies and website operation

The shop uses PrestaShop cookies to maintain sessions and support functions such as account access, basket contents and shop preferences. These cookies use names beginning with PrestaShop-. They may remain on your device between visits and expire according to the shop's settings; at the date of this notice the observed expiry period is approximately 20 days.

A PHPSESSID cookie also identifies the website session. The observed browser expiry for this cookie is up to 400 days, although the corresponding server session may end sooner. You can remove it through your browser settings.

You can inspect, delete or block cookies through your browser settings. Blocking cookies needed by the shop may prevent sign-in, basket or checkout functions from working correctly. Security and access logs may still be generated when your browser requests a page.

The website loads fonts and icons from Google Fonts. Your browser connects to Google's servers, which receive technical request information such as your IP address and browser headers to deliver these resources. We use this service for the legitimate interest of presenting a consistent, readable website. For details of Google's handling of these requests, see Google Fonts privacy information.

A newsletter choice or acceptance of terms does not give consent to advertising or tracking cookies. Any optional tracking that requires consent must have a separate choice before it is used. This notice does not replace such a choice.

9. Protecting information

We use access controls and technical safeguards appropriate to the operation of the shop. Website connections use HTTPS. Please keep your password confidential and contact us if you believe your account has been accessed without permission. No website or transmission method can be guaranteed to be completely secure.

10. Your rights

Depending on the circumstances and the legal basis for processing, you may have the right to:

  • request access to your personal information and a copy of it;
  • have inaccurate or incomplete information corrected;
  • request erasure of information;
  • ask us to restrict its use;
  • receive certain information in a portable format;
  • object to processing, including the unconditional right to object to direct marketing;
  • withdraw consent where processing relies on consent;
  • exercise the safeguards applicable to significant decisions made solely by automated processing, where relevant.

These rights are subject to applicable conditions and exceptions. For example, a deletion request does not override a duty to retain accounting records. To make a request, email info@coretradehub.co.uk. We may ask for proportionate information to confirm your identity. We normally respond within one month, subject to any extension permitted by law.

11. Complaints

Please contact us if you are unhappy with how your information is handled so that we can investigate. You can also complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or telephone 0303 123 1113.

12. Changes to this policy

We will update this page when our practices or relevant requirements change. The date at the top identifies the latest version. Where required, we will bring significant changes to your attention separately.